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REMARKS 

Claims 1-23 are pending. All claims have been rejected. Independent claims 5, 7, 
and 20 have been amended to obviate the rejections. Claims 1-4, 6, 8-19, and 21-23 have not 
been amended. No new matter has been entered. 
Rejection under 35 U.S.C. §112, first paragraph 

Claims 5 and 6 stand rejected under 35 U.S.C. §112, first paragraph, as allegedly 
failing to comply with the written description requirement. Applicant respectfully disagrees. 

The Examiner purportedly does not find written description support for "changing a 
first password, the system having a password database that stores said first password...." The 
Examiner purportedly also does not find support for "obtaining" the "first password." 
Applicant notes that the specification refers to replacing an "old password" with a "new 
password" (see, for example, paragraph [0032]) and storing "data indicative of the new 
password" in a database "other than the password database on the system" (see Figure 5) 
where the "old password" is stored (see, for example, paragraph [0034]). Applicant has 
changed the wording "first password" to "old password" to explicitly recite the language used 
in the specification. The Examiner is also asked to note that the claims did NOT and do not 
recite "obtaining" the "first password." The claims recited "changing a first password" and 
now recite "changing an old password." These steps of the claimed method are clearly 
disclosed throughout the specification and particularly in the cited paragraphs. Withdrawal 
of the rejection of claims 5 and 6 under 35 U.S.C. §112, first paragraph, is thus proper and is 
respectfully solicited. 

Rejections under 35 U.S.C. §102(b) and §103(a) 

The Examiner has again rejected claims 1-7, 11, and 18-21 under 35 U.S.C. § 102(b) 
as allegedly being anticipated by Bellemore et al. (US 5,944,825), claims 8-10 and 12-15 
under 35 U.S.C. § 103(a) as allegedly being obvious over Bellemore in view of Novoa et al. 
(US 6,636,973), and claims 16-17 and 22-23 under 35 U.S.C. §103(a) as allegedly being 
obvious over Bellemore and Novoa in view of Schneier (Bruce Schneier, "Applied 
Cryptography, Second Edition). These rejections are respectfully traversed. 

In the "Response to Arguments" section of the Official Action (pages 3-6), the 
Examiner expresses his finding that Applicant's previous arguments were "not persuasive" 
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since Applicant has "not claimed" the steps of "detection of the change of password operation 
and the storage of the new password in a second database" (emphasis in original) or the step 
of "providing the new password to the system automatically" as argued in the previous 
response. Applicant respectfully disagrees. Support for the cited limitations may be found in 
independent claim 1 (without amendment) and in independent claims 5, 7, and 20 as 
amended. Specific support in each independent claim is indicated below. 
Independent claim 1 recites: 

detecting an occurrence of a password change operation in execution on a system 
having a password database that stores passwords resulting from a password change operation; 
detecting a new password when provided; and, 

storing data indicative of the new password in a database other than the password 
database for later retrieval, the data indicative of the new password for use in providing the 
new password to the system automatically. 

Independent claim 5 recites: 

detecting a change password operation in execution on a system for changing an 
old password, the system having a password database that stores said old password; 

displaying to a user a prompt for a new password, in response to detecting the change 
password operation in execution and other than occurring as an operation of the change 
password operation; 

receiving the new password; 

performing an operation to change the old password to the new password in the 
system automatically; and, 

storing the new password in a database independent of the change password 
operation and other than the password database where the new password is stored by 
the change password operation. 

Independent claim 7 recites: 

detecting a password change operation in execution on a system having a 
password database that stores passwords resulting from a password change operation; 
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displaying to a user a prompt for authentication information in response to detecting 
the change password operation in execution and other than occurring as an operation of the 
change password operation; 

receiving the authentication information; 

when the authentication information is indicative of a known user, performing an 
operation to change a password of the known user to a new password in the system 
automatically; and, 

storing the new password in a database independent of the change password 
operation and other than the password database where the changed password is stored by 
the change password operation. 

Independent claim 20 recites: 

detecting a password change operation in execution on a system having a known 
user authorized thereon; 

automatically generating a new password in response to detecting the password 
change operation and other than occurring as an operation of the change password operation 
and storing the new password in a password database; 

performing an operation to change a password to the new password in the 
system automatically; and, 

storing the new password in a database independent of the change password 
operation and other than the password database where the changed password is 
stored. 

The claimed features are not believed to be shown or suggested by the prior art relied 
upon by the Examiner for the reasons given below. 
Bellemore 

Bellemore disclose a database system having its own security and password 
mechanisms independent of the security and password mechanisms of an associated server. 
A script is invoked to determine whether a provided password meets certain password 
criteria. Figure 4 illustrates the steps taken by a security process when the client transmits a 
password change request to the database. As illustrated, the security process receives the 
client user ID, password, and the proposed new password. A script executing process 205 



Page 9 of 12 



DOCKET NO.: IVPH-0070 PATENT 

Application No.: 09/977,202 

Office Action Dated: February 2 1 , 2006 

executes a verification script and transmits a message indicating whether the proposed 
password meets the criteria embodied in the script. A message is also provided to the client 
indicating whether the password and user ID combination is valid. Such scripts enable the 
database to provide security independent of the server upon which it resides. 

As noted in the previous response, Applicant can find no reference in Bellemore to a 
password database or a database "other than the password database" for storing a new 
password or data indicative of the new password and associating same with authentication 
data for the user. Such a separate database system for tracking password changes does not 
appear to be taught by Bellemore. Moreover, Bellemore provides no teachings relevant to 
changing passwords for several systems/files/applications automatically as claimed. 
Claims 1-7, 11, and 18-21 

Independent claim 1 recites a method of securely supporting password change by 
detecting the occurrence of a password change operation that changes a password and stores 
same in a password database and "stores data indicative of the new password in a database 
other than the password database for later retrieval, the data indicative of the new password for 
use in providing the new password to the system automatically." Similar features may be found 
in amended independent claims 5, 7, and 20. What is common to each of these independent 
claims is the detection of the change of password operation and the storage of the new 
password in a second database (other than the password database) for later retrieval and 
providing the new password to the system automatically. 

Applicant can find no comparable teachings in Bellemore. The citations provided by 
the Examiner are irrelevant to the subject matter claimed. The amendments to the claims are 
believed to obviate the Examiner's interpretations of the teachings of Bellemore as applied to 
the claims. Applicant does not see how the database system of Bellemore (for which a 
separate security and password system is provided) is relevant to the claimed password 
database. In any event, Bellemore clearly does not teach another database for storing the new 
password as claimed. The amendments to independent claims have been made to further 
clarify that the system includes a password database and a separate database and that such 
databases are not the same as a database system of the type taught by Bellemore. The 
invention as claimed is thus believed to clearly distinguish from the teachings of Bellemore. 



Page 10 of 12 



DOCKET NO.: IVPH-0070 PATENT 

Application No.: 09/977,202 

Office Action Dated: February 21, 2006 

As Bellemore does not anticipate the method of claims 1, 5, 7, or 20 or any of the 
claims dependent thereon, withdrawal of the rejection of claims 1-7, 11, and 18-21 over 
Bellemore is appropriate and is respectfully requested. 
Claims 8-10, 12-17, and 22-23 

The Examiner has cited Novoa with respect to dependent claims 8-10 and 12-15 and 
Schneier with respect to claims 16-17 and 22-23. Inasmuch as neither Novoa nor Schneier 
teaches a method of securely supporting password change by detecting the occurrence of a 
password change operation that changes a password and stores same in a password database 
and further performs the steps of "performing an operation to change a password of the 
known user to a new password in the system automatically" and "storing the new password in 
a database independent of the change password operation and other than the password 
database where the changed password is stored by the change password operation" as 
claimed, even if the teachings of Novoa alone or Novoa and Schneier could have been 
combined with the teachings of Bellemore as proposed by the Examiner, the claimed 
invention would not result. Withdrawal of the rejections of claims 8-10, 12-17 and 22-23 is 
thus solicited. 

Moreover, Applicant notes that the Examiner has provided no reason or suggestion 
for combining the teachings of Bellemore and Novoa alone or Novoa and Schneier to arrive 
at the claimed invention. It is unclear to Applicant what teaching is provided to combine the 
teachings of the references to provide a new password that is an "encryption key" and what 
relevance such a combination would have to the claimed invention in any event. Applicant 
submits that there is no such motivation and that the combination is improper. To sustain a 
proper rejection based on prima facie obviousness, the Examiner is required, and is hereby 
requested, to provide a reason, suggestion or motivation as to why one skilled in the art at the 
time of the invention would have known to combine the teachings of Bellemore and Novoa 
alone or Novoa and Schneier as proposed to arrive at the claimed invention. Absent such 
suggestions or motivation, the rejections of claims 8-10, 12-17 and 22-23 are improper and 
must be withdrawn. 

For these reasons, claims 8-10, 12-17 and 22-23 are believed to be allowable for the 
same reasons as given above with respect to independent claims 7 and 20, respectively. 
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Conclusion 

In view of the above, withdrawal of the rejections of claims 1-7, 11, and 18-21 as 
being anticipated by Bellemore and claims 8-10, 12-17 and 22-23 as being obvious over 
Bellemore in view of Novoa alone or Novoa and Schneier is respectfully requested. 
Withdrawal of the rejections under Section 103 is further requested in view of the Examiner's 
failure to establish a prima facie case of obviousness due to the lack of any proposed reason 
or motivation for one skilled in the art at the time of the invention to combine the teachings of 
Bellemore, Novoa alone or Novoa and Schneier as proposed. 

The present response is believed to obviate all rejections and objections of record. 
Entry of this amendment is believed to place the present application in condition for 
allowance. Withdrawal of all rejections and issuance of a Notice of Allowability are 
respectfully requested. 
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